News for hackers. Stuff that matters.

A comment on Intention to fine Marriott more than £99M under GDPR for data breach. Parent comment

Re:Intention to fine Marriott more than £99M under GDPR for ... by Benjamin_Dobell on Tuesday July 09, 2019 @12:07PM (#20393251)
It does if said companies plan on being acquired, which is precisely what happened here:

> It is believed the vulnerability began when the systems of the Starwood hotels group were compromised in 2014. Marriott subsequently acquired Starwood in 2016

[ Parent | on HN ]
Re:Intention to fine Marriott more than £99M under GDPR for ... by diminoten on Tuesday July 09, 2019 @12:30PM (#20393533)
Starwood is by far big enough to have the GDPR apply to it independently.

Starwood was well beyond the "move fast and break things" phase of companies. Many companies aren't, and if you're trying to say all startups have to comply with GDPR on day 1, you are wrong.

[ Parent | on HN ]
Re:Intention to fine Marriott more than £99M under GDPR for ... by supermatt on Tuesday July 09, 2019 @02:02PM (#20394782)
Yes they do, from day 1. Maybe you are confused between this and the recent copyright stuff
[ Parent | on HN ]
Re:Intention to fine Marriott more than £99M under GDPR for ... by diminoten on Tuesday July 09, 2019 @02:24PM (#20395049)
https://www.internetlegalattorney.com/are-there-gdpr-exempti...

> U.S. based businesses may actually be exempt based upon some interpretation of Article 3.2(a):

[ Parent | on HN ]
Re:Intention to fine Marriott more than £99M under GDPR for ... by supermatt on Thursday July 11, 2019 @01:53AM (#20409439)
OK - so basically, if you don't knowingly provide (or envisage providing) goods or services to EU customers.

This is a very different situation from your original statements based on size and maturity of a company - but I'll concede that the EU reach clearly only applies to EU interests .

[ Parent | on HN ]